Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/cY6d8D0l31ojpnEFGjJwmv8AycM.roa
File: cY6d8D0l31ojpnEFGjJwmv8AycM.roa (raw, json)
Hash identifier: 0SG0rPQNj9EqpZYQ5Q1xcsNKUliVGeUPgcK1eK6Qzdo=
Subject key identifier: 71:8E:9D:F0:3D:25:DF:5A:23:A6:71:05:1A:32:70:9A:FF:00:C9:C3
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F022B469415582FA2F07B4252E3C6E1
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/cY6d8D0l31ojpnEFGjJwmv8AycM.roa
Signing time: Sun 01 Jan 2023 20:24:51 +0000
ROA not before: Sun 01 Jan 2023 20:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394808
IP address blocks: 83.231.150.192/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:2b:46:94:15:58:2f:a2:f0:7b:42:52:e3:c6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=718e9df03d25df5a23a671051a32709aff00c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:04:65:f5:56:1b:ee:e6:1d:c4:6c:c6:2c:
a2:c0:da:de:ae:8f:9a:12:73:05:f4:71:8e:65:d1:
6a:bc:7b:09:d3:aa:aa:d1:28:ed:9c:50:42:b9:4e:
8a:05:3b:3b:58:ed:20:ef:4d:2e:bb:d3:47:44:7e:
bf:33:f6:ef:42:32:95:be:cb:85:4a:0c:b9:17:42:
9a:4a:88:eb:f2:3f:ef:bc:92:c3:f7:2b:8b:c3:1c:
16:f7:b8:59:5e:bc:4e:df:6a:a4:96:2b:ba:b0:44:
a1:d8:1a:56:c6:31:26:98:a5:58:f3:7f:27:fa:31:
58:fe:85:81:41:ac:3f:af:6f:83:99:8e:69:c7:82:
e9:77:b3:5b:42:12:0f:16:b3:2e:32:ac:a9:06:ee:
f3:39:3a:56:cc:ad:5b:de:4c:b6:ce:ef:9d:ff:ec:
56:ab:fb:cb:8f:4b:7c:7d:5b:ff:c1:a1:50:99:8e:
87:4f:31:4d:f6:a5:65:49:c8:3f:8a:49:8d:ca:2c:
c5:00:9f:3f:8c:1c:7b:71:bd:61:b3:22:2d:f3:82:
28:58:d2:fc:51:3f:b6:43:d5:b0:f4:18:4c:11:c2:
ec:30:83:c6:02:3b:8f:3b:0c:58:24:bf:55:70:2d:
90:10:7a:4c:09:b1:70:1a:df:e6:af:dd:ce:ee:4c:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8E:9D:F0:3D:25:DF:5A:23:A6:71:05:1A:32:70:9A:FF:00:C9:C3
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/cY6d8D0l31ojpnEFGjJwmv8AycM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.150.192/27
Signature Algorithm: sha256WithRSAEncryption
47:7f:32:a5:a9:12:53:56:36:2a:9e:69:82:87:9b:3e:05:77:
a2:b8:59:97:48:ae:c0:56:27:c0:cb:44:ae:11:1a:c0:50:8b:
27:60:3b:4c:6d:6f:8d:3c:a8:31:d7:df:33:1f:08:e8:d2:d4:
0d:f8:ee:34:b2:5c:4c:22:ff:d9:a0:ea:67:99:5d:a3:37:1e:
2b:ee:b3:22:ff:d0:3a:e8:5b:dd:a7:87:db:2a:ac:e8:88:ed:
ae:3c:0b:5e:df:e8:94:2f:30:ec:91:fa:7f:b5:fe:91:94:95:
ce:5c:2e:1c:4b:aa:85:4e:f1:1a:cd:a2:b6:f1:32:69:67:cd:
df:c8:60:c6:a7:37:34:90:ae:ee:1b:e1:d8:e9:ca:a2:48:3d:
3c:77:16:df:59:67:80:92:c2:0f:ea:78:b5:74:78:a1:07:a7:
69:ea:f2:a3:f2:34:2f:61:25:b3:3a:f8:a7:39:5e:4e:61:d2:
5c:65:f2:d9:bf:71:05:35:ed:a0:d7:ad:86:92:f3:6a:25:95:
b5:79:86:cd:70:84:f7:84:2b:ea:86:bd:d0:e2:20:c9:9d:80:
08:7e:6c:a5:69:e9:ef:81:b3:54:82:1b:e7:3a:56:25:ea:97:
dc:ef:77:86:07:4a:b2:74:a5:64:18:98:fe:25:06:1d:c7:af:
8f:e4:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:03 2025 by rpki-client